Apple visionOS vulnerabilities
854 known vulnerabilities affecting apple/visionos.
Total CVEs
854
CISA KEV
17
actively exploited
Public exploits
10
Exploited in wild
21
Severity breakdown
CRITICAL57HIGH229MEDIUM426LOW20UNKNOWN122
Vulnerabilities
Page 28 of 43
CVE-2026-84615P4MEDIUMCVSS 5.5fixed in 27.0fixed in 272026-09-14
CVE-2026-84615 [MEDIUM] CWE-285 CVE-2026-84615: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, tvOS 27, visionOS 27. An app may be able to access sensitive user data.
nvd
CVE-2026-65403P4MEDIUMCVSS 5.5fixed in 27.0fixed in 272026-09-14
CVE-2026-65403 [MEDIUM] CWE-284 CVE-2026-65403: This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
nvd
CVE-2026-84636P4MEDIUMCVSS 5.5fixed in 27.0fixed in 272026-09-14
CVE-2026-84636 [MEDIUM] CWE-285 CVE-2026-84636: An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
nvd
CVE-2026-84491P4MEDIUMCVSS 5.5fixed in 27.0fixed in 272026-09-14
CVE-2026-84491 [MEDIUM] CWE-284 CVE-2026-84491: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
nvd
CVE-2026-113898P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-113898 CVE-2026-113898: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iP
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.
nvd
CVE-2026-112660P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112660 CVE-2026-112660: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to bypass certain Privacy preferences.
nvd
CVE-2026-86954P4UNKNOWNfixed in 272026-10-26
CVE-2026-86954 CVE-2026-86954: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
nvd
CVE-2026-113915P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-113915 CVE-2026-113915: A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPa
A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
nvd
CVE-2026-112656P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112656 CVE-2026-112656: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2026-112571P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112571 CVE-2026-112571: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2026-112632P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112632 CVE-2026-112632: An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iO
An uninitialized memory issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2026-86920P4UNKNOWNfixed in 272026-10-26
CVE-2026-86920 CVE-2026-86920: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to access sensitive user data.
nvd
CVE-2026-65397P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-65397 CVE-2026-65397: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
nvd
CVE-2026-112642P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112642 CVE-2026-112642: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2026-112627P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112627 CVE-2026-112627: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
nvd
CVE-2026-112628P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112628 CVE-2026-112628: This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 an
This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
nvd
CVE-2026-113910P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-113910 CVE-2026-113910: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iO
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel memory.
nvd
CVE-2026-86970P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-86970 CVE-2026-86970: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
nvd
CVE-2026-112596P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112596 CVE-2026-112596: An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and
An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.
nvd
CVE-2026-112466P4UNKNOWNfixed in 27.22026-10-26
CVE-2026-112466 CVE-2026-112466: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or read kernel memory.
nvd